Privacy Policy

Last updated: 12 September 2026

1. Controller

The controller for the processing of personal data is Leon Marquardt / Trainvent, Ravensbergerstraße 75, 33602 Bielefeld, Germany, telephone +49 160 3455942, email for data-protection enquiries: support@trainvent.com.

2. Website visits and hosting

When you visit our website, our hosting provider STRATO AG processes technically necessary connection data, including IP address, time, requested page or file, amount of data, referrer URL, browser type and operating system. This serves the delivery, security and stability of the website and protection against attacks (Article 6(1)(f) GDPR). Log data are retained only for as long as necessary for these purposes.

We use WordPress, WooCommerce, TranslatePress and WP-Optimize to provide, manage, translate, secure and optimise the website.

3. Cookies and consent

We use technically necessary cookies and similar technologies for the cart, checkout, language settings, security functions and consent management (Section 25(2) TTDSG; Article 6(1)(f) GDPR). Optional technologies, especially analytics, are activated through Complianz only after your consent (Section 25(1) TTDSG; Article 6(1)(a) GDPR). The consent banner shows categories, services, purposes and retention periods; you can change your choice at any time through “Manage consent”.

4. Google Analytics

If you consent to analytics, we use Google Analytics 4 through Site Kit by Google. It may process online identifiers, cookie or device identifiers, IP-related technical information, browser and device information, page views, interactions, approximate location information and timestamps. We do not send names, email addresses, order content or other directly identifying data to Google Analytics. The legal basis is your consent (Article 6(1)(a) GDPR; Section 25(1) TTDSG).

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; processing by Google LLC, USA, may occur. Third-country transfers take place only on the basis of appropriate safeguards, in particular the EU-US Data Privacy Framework and/or standard contractual clauses, where applicable. Further information: Google Privacy Policy.

5. Online shop and orders

To process orders, we handle in particular your name, billing and delivery address, email address, telephone number where provided, products, price, tax and shipping data, and communications relating to the order. The legal bases are Article 6(1)(b) and (c) GDPR and, where necessary, Article 6(1)(f) GDPR. Registration or sign-in for shop customers is currently disabled.

We retain invoices and tax-relevant documents in accordance with our legal obligations, normally for ten years for commercial and tax records and eight years for accounting documents. We delete other data once it is no longer needed for fulfilment, warranty, legal defence or statutory obligations.

6. Payments

To process payments, we pass the necessary data, such as name, billing address, email address, amount, currency, order number and transaction identifiers, to the payment service provider you choose. Credit-card and other sensitive payment data are not stored on our server.

• WooPayments for credit/debit cards and, where applicable, Apple Pay and Google Pay; provided by Automattic/WooCommerce in cooperation with Stripe. Further information: WooPayments and Stripe privacy policy.
• PayPal, provider PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg: PayPal privacy policy.

The legal basis is Article 6(1)(b) GDPR.

7. Shipping

To deliver orders, we transfer the necessary data, in particular name, delivery address and, where applicable, email address, telephone number, shipment and order information, to DHL or Deutsche Post (Article 6(1)(b) GDPR).

8. Email and contact

For transactional emails, such as order confirmations and messages concerning contract performance, we use an email-delivery service. It may process email address, name, order or communication content and technical delivery data. Processing is carried out for contract performance and to handle your enquiry (Article 6(1)(b) GDPR), or based on our legitimate interest in reliable communication (Article 6(1)(f) GDPR).

When you contact us by email or through WPForms, we process the data you provide to handle your request and delete it once it has been completed, unless statutory retention obligations or legitimate reasons require otherwise.

9. Other services

We use ActiveLayer Anti-Spam to protect forms; technical information may be processed to identify abusive requests (Article 6(1)(f) GDPR). Comments are disabled. Google Search Console and Google for WooCommerce support technical search visibility and management of the product catalogue; Google sign-in is not offered to shop customers.

10. Recipients and third-country transfers

Recipients may include STRATO, WooCommerce/Automattic, WooPayments/Stripe, PayPal, DHL, Deutsche Post, Google and the services named in the consent banner. Where data are processed outside the EU/EEA, this takes place only when the statutory requirements are met, for example on the basis of an adequacy decision, the EU-US Data Privacy Framework where certified, or standard contractual clauses.

11. Your rights

Subject to the statutory conditions, you have the right to access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw consent at any time with effect for the future. Contact support@trainvent.com. You also have the right to lodge a complaint with a data-protection supervisory authority.

12. Changes

We update this Privacy Policy when our data processing, the services used or legal requirements change.